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Abstract 

A polynomial identity testing algorithm must determine whether 
an input polynomial (given for instance by an arithmetic circuit) is 
identically equal to 0. In this paper, we show that a deterministic 
black-box identity testing algorithm for (high-degree) univariate poly- 
nomials would imply a lower bound on the arithmetic complexity of 
the permanent. The lower bounds that are known to follow from de- 
randomization of (low-degree) multivariate identity testing are weaker. 

To obtain our lower bound it would be sufficient to derandomize 
identity testing for polynomials of a very specific norm: sums of prod- 
ucts of sparse polynomials with sparse coefficients. This observation 
leads to new versions of the Shub-Smale r-conjecture on integer roots 
of univariate polynomials. In particular, we show that a lower bound 
for the permanent would follow if one could give a polynomial up- 
per bound on the number of real roots of sums of products of sparse 
polynomials (Descartes' rule of signs gives such a bound for sparse 
polynomials and products thereof). 

In this third version of our paper we show that the same lower 
bound would follow even if one could only prove a slightly superpoly- 
nomial upper bound on the number of real roots. This is a consequence 
of a new result on reduction to depth 4 for arithmetic circuits which 
we establish in a companion paper. We also show that an even weaker 
bound on the number of real roots would suffice to obtain a lower 
bound on the size of depth 4 circuits computing the permanent. 
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1 Introduction 



A polynomial identity testing algorithm must determine whether an input 
polynomial (given for instance by an arithmetic circuit) is identically equal 
to 0. If randomization is allowed, this problem can be solved efficiently 
thanks to the well-known Schwarz-Zippel lemma. Following Kabanets and 
Impagliazzo [12] , it has become increasingly clear in recent years that efficient 
deterministic algorithms for polynomial identity testing would imply strong 
lower bounds (the connection between arithmetic circuit lower bounds and 
derandomization of polynomial identity testing was foreshadowed in a 30 
years old paper by Heintz and Schnorr [11]). This approach to lower bounds 
was advocated in particular by Agrawal [1]. 

In this paper we show that an efficient black-box deterministic identity 
testing algorithm for univariate polynomials of a very specific form (namely, 
sums of products of sparse polynomials with sparse coefficients) would imply 
that the permanent does not belong to VP''. This is the class of polynomial 
families computable by constant-free arithmetic circuits of polynomial size 
and polynomially bounded formal degree. It plays roughly the same role for 
constant-free circuits as the class VP in Valiant's algebraic version of the P 
versus NP problem (in Valiant's original setting, arithmetic circuits can use 
arbitrary constants from the underlying field [9l 128] ). 

Compared to [H [12] , one originality of the present paper is to show that 
lower bound for multivariate polynomials such as the permanent would fol- 
low from univariate identity testing algorithms. Most of the recent work on 
identity testing (surveyed in [21 [25]) has been focused on low-degree multi- 
variate polynomials^ Nevertheless, we believe that the univariate approach 
is worth exploring for at least two reasons. 

First, it would lead to stronger lower bounds. Indeed, we show that 
black-box derandomization of identity testing implies a lower bound for the 
permanent, whereas [U Section 6.2] would only yield lower bounds for poly- 
nomials with coefficients computable in PS PACE (this complexity class was 
independently defined in [20], where it is called VPS PACE; further results on 
this class and other space-bounded classes in Valiant's model can be found 
in [191 124[ I22[). The lower bound obtained from [12] would be even weaker, 
but could be obtained from a non-black-box identity testing algorithm. 

A second, possibly even more important advantage of the univariate ap- 
proach is that it leads to new (and hopefully more tractable) versions of 
Shub and Smale's r-conjecture. According to the r-conjecture, the number 

^Two exceptions are [71 117|. 
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of integer roots of a univariate polynomial / G should be bounded by 

a polynomial function of its arithmetic circuit size (the inputs to the cir- 
cuit are the constant 1, or the variable X). It was shown by Biirgisser [10] 
that the r-conjecture implies a lower bound for the permanent. Our main 
"hardness from derandomization" result can be viewed as an improvement 
of Biirgisser 's result. Indeed, it follows immediately from our result that to 
obtain a lower bound for the permanent, one just has to bound the number 
of integer roots for sums of products of sparse polynomials with sparse coef- 
ficients (rather than for arbitrary arithmetic circuits). Our strongest version 
of the r-conjecture raises the intriguing possibility that tools from real analy- 
sis might be brought to bear on this problem (a bound on the number of real 
roots of a polynomial is a fortiori a bound on its number of integer roots). 
It is known that this approach cannot work for the original r-conjecture 
because the number of real roots of a univariate polynomial can grow expo- 
nentially as a function of its arithmetic circuit size: Chebyshev polynomials 
provide such an example [27\ . A similar example was provided earlier by 
Borodin and Cook [8] (but they did not provide an analysis of the size of 
constants used by the corresponding arithmetic circuit). We conjecture that 
this behavior is not possible for sums of products of sparse polynomials. 

1.1 Main Ideas 

A hitting set Ti for a set of polynomials is a (finite) set of points such 
that there exists for any non-identically zero polynomial / G at least one 
point a £ Ti such that /(a) 7^ 0. Hitting sets are sometimes called "correct 
test sequences" It is well-known that deterministic constructions of 

hitting sets and black-box deterministic identity testing are two equivalent 
problems: any hitting set for Ti yields an obvious black-box identity testing 
algorithm (declare that / = iff / evaluates to on all the points of Ti); 
conversely, assuming that contains the identically zero polynomial, the set 
of points queried by a black box algorithm on the input / = must be a 
hitting set for J^. 

The connection between black-box identity testing and lower bounds is 
especially apparent for univariate polynomials Namely, let ^ be a 

hitting set for J^. The polynomial 

P=ll{X-a) (1) 

cannot belong to J- since it is nonzero and vanishes on Ti. The same re- 
mark applies to all nonzero multiples of P. If is viewed as some kind of 



3 



"complexity class", we have therefore obtained a lower bound against T by 
exhibiting a polynomial P which does not belong to T . 

In the low-degree multivariate setting the polynomial which plays the 
same role is not given by such a simple formula as ([1]). Its coefficients can 
be obtained by solving an exponential size system of linear equations. This 
can be done in PS PACE, explaining why the lower bound in [1] would be 
for polynomials with coefficients computable in PS PACE. By contrast one 
can show that the coefficients in exponential-size products such as ([TJ are 
in the counting hierarchy, a subclass of PS PACE. This is the reason why we 
can obtain a lower bound for a polynomial in VNP (namely, the permanent) 
rather than in VPSPACE as in pi, Section 6.2]. 

It remains to explain why we only have to derandomize identity testing 
for sums of products of sparse polynomials in order to obtain a lower bound. 
This class of polynomials comes into the picture thanks to the recent depth 
reduction theorem of Agrawal and Vinay [3]: any multilinear polynomial in 
n variables which has an arithmetic circuit of size 2°^"') also has a depth-4 
arithmetic circuit of size 2''("). Sums of products of sparse polynomials are 
very far from being multilinear (they are univariate polynomials of possibly 
very high degree). They are nonetheless connected to depth-4 circuits by a 
simple transformation: if we replace the input variables in a depth-4 circuit 
by powers of a single variable X, we obtain a SPS polynomial f{X). 

At this point, we should stress that we do not claim that univariate 
arithmetic circuits can be efficiently converted into SPS polynomials (this 
would be a kind of high-degree analogue of Agrawal and Vinay's depth re- 
duction theorem). On the contrary, we conjecture that such a transformation 
is in general impossible, and that Chebyshev polynomials provide a coun- 
terexample (because, as pointed out earlier, they have too many real roots). 
Nevertheless, to obtain our results we represent efficiently (in Theorem [6|) 
certain exponential size products by sums of products of sparse polynomials. 
This is possible only under the assumption that the permanent is easy. This 
assumption (and the resulting representation) is of course very likely to be 
false, but there is no harm in making it since the ultimate goal is a proof by 
contradiction that the permanent is hard. 

1.2 Organization of the Paper 

In the next section we present our model of computation for the permanent 
(constant-free arithmetic circuits) as well as the corresponding complexity 
classes. Then we recall some definitions and results about the counting 
hierarchy (as explained above, this class plays a crucial role in the derivation 
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of a lower bound for the permanent). Finally, we present the result by 
Agrawal and Vinay on reduction to depth four for arithmetic circuits, as 
well as a new result along the same lines |15) . 

In Section [3] we define precisely the notion of sum of products of sparse 
polynomials with sparse coefficients, and explain the connection to depth-4 
circuits. 

In Section m we present the notion of algebraic number generator. This 
is basically just a sequence of efficiently computable polynomials in 
We wish to use them to construct hitting sets, by taking the sets of all roots 
of the polynomials in an initial segment of this sequence. In Section [5] we 
prove our main result: if a polynomial-size initial segment provides a hitting 
set against sums of products of sparse polynomials with sparse coefficients, 
then the permanent is not in VP'^. In fact, using our new result on reduction 
to depth four [15] we can show that the same lower bound would follow even 
if the hitting sets are of slightly superpolynomial size. 

In Section [6] we present three new versions of the r-conjecture, including 
a "real r-conjecture". A proof of any of these conjectures would yield a 
lower bound for the permanent. We show that a fairly weak version of the 
real r-conjecture would suffice to obtain a lower bound on the size of depth 
4 circuits computing the permanent. We conclude the paper with a few 
remarks on some tools that might be useful to attack these conjectures. 

2 Preliminaries 

2.1 Complexity of Arithmetic Computations 

We recall that an arithmetic circuit contains addition, subtraction and mul- 
tiplication gates. We usually assume that these gates have arity 2, except 
when dealing with constant-depth circuits as in e.g. Theorem [3l The in- 
put gates are labelled by variables or constants. A circuit where the only 
constants are from the set {0, —1, 1} is said to be constant-free (in such a 
circuit one can even assume that —1 is the only constant, and that there 
are no subtraction gates). A constant-free circuit represents a polynomial in 
Z[A'i, . . . , Xn], where Xi, . . . , Xn are the variables labelling the input gates. 

In this paper we investigate the complexity of computing the permanent 
polynomial with constant-free arithmetic circuits. This model of computa- 
tion was systematically studied by Malod |23) . In particular, he defined a 
class VP^ of polynomial families that are "easy to compute" by constant-free 
arithmetic circuits. First we need to recall the notion of formal degree: 
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(i) The formal degree of an input gate is equal to 1. 



(ii) The formal degree of an addition or subtraction gate is the maximum 
of the formal degrees of its two incoming gates, and the formal degree 
of a multiplication gate is the sum of these two formal degrees. 

Finally, the formal degree of a circuit is equal to the formal degree of its out- 
put gate. This is obviously an upper bound on the degree of the polynomial 
computed by the circuit. 

Definition 1 A sequence (fn) of polynomials belongs to VP^ if there exists 
a polynomial p{n) and a sequence {Cn) of constant-free arithmetic circuits 
such that Cn computes fn and is of size (number of gates) and formal degree 
at most p{n). 

The size constraint implies in particular that /„ depends on polynomially 
many variables. The constraint on the formal degree forbids the compu- 
tation of polynomials of high degree such as e.g. X^"; it also forbids the 
computation of large constants such as 2^" . 

A central question in the constant-free setting is whether the permanent 
family belongs to VP*^. A related question is whether r(PER„), the constant- 
free arithmetic circuit of the n x n permanent, is polynomially bounded in 
n. Obviously, if PER E VP'' then t(PER„) is polynomially bounded in n, 
but (as pointed out in e.g. [9]) it is not clear whether the converse holds 
true. In this paper we focus on the first question (see section [7] for further 
comments) . 

Another important complexity class in the constant-free setting is the 
class VNP*^ of easily definable families. It is obtained from VP*^ in the natural 
way: 

Definition 2 A sequence (/„(Xi, . . . ,-^u(n))) belongs to VNP^ if there exists 
a sequence (g„(Xi, . . . , AT^^^-j)) in \/P^ such that: 



For instance, the permanent family is in VNP . If this family in fact belongs 
to VP*^ then the same is true of every VNP" family up to constant multi- 
plicative factors. Indeed, we have the following result (Theorem 4.3 of [16|): 

Theorem 1 Assume that the permanent family is in \/P^ . For every family 
{fn) inMHP^ there exists a polynomially bounded function p{n) such that the 






eg{0,l}'^(")-"(") 



family (2pW/„) 



is in VP". 
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The occurence of the factor 2^^"^ in this theorem is due to the fact that the 
completenes proof of the permanent uses the constant 1/2. As in [16j one 
could avoid this factor by working with the Hamihonian polynomial instead 
of the permanent. 

The next lemma is Valiant's criterion. The present formulation is basi- 
cally that of [16, Til. 2.3] but this lemma essentially goes back to |28) (see 
also P Prop. 2.20]). 

Lemma 1 (Valiant's criterion) Suppose that n i— t- p{n) is a polynomially 
bounded function, and that / : NxN — )■ Z is such that the map l"Oj i— )• f{j, n) 
is in the complexity class GapP/poly. Then the family [fn) of multilinear 
polynomials defined by 

^(Xi,...,Xp(„))= (2) 

je{o,i}p(") 

is in VNP°. Here jk denotes the bit of j of weight 2^~^. 

Note that we use a unary encoding for n but a binary encoding for j. We re- 
call the definition of GapP/poly (and a few other boolean complexity classes) 
in Section 12.21 In this paper we only need to apply Valiant's criterion to 
boolean-valued functions (/(j, n) G {0, 1} for all j and n) such that the map 
l"Oj !-)• f{j,n) is in P/poly. 

2.2 The Counting Hierarchy 

A connection between the counting hierarchy and algebraic complexity the- 
ory was discovered in p[]. This connection was further explored in |10j 
and [18j. For instance, it was shown in [lOj that the polynomials ri^=o("'^~^) 
have polynomial-size circuits if the the same is true for the permanent family. 
We first recall the definition of the two counting classes [JP and GapP. 

Definition 3 The class [JP is the set of functions f : {0, 1}* — >■ N such that 
there exist a language A £ P and a polynomial p{n) satisfying 

/(2^)=#{ye{0,ir(N):(x,y)GA}. 

A function f : {0, 1}* % is in GapP if it is the difference of two {|P 
functions. 

The counting hierarchy introduced in [29] is a class of languages rather than 
functions. It is defined via the majority operator C as follows. 
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Definition 4 If K is a complexity class, the class C.K is the set of lan- 
guages A such that there exist a language B & K and a polynomial p{n) 
satisfying 

xeA ^ #{ye {0, Ifd^l) : (x, y) e B} > 2^(1^1)"^ 

The i-th level Q.\P of the counting hierarchy is defined recursively by CqP = P 
and Ci+iP = C.CiP. The counting hierarchy CH is the union of the levels 
CiP for all i > 0. 

The counting hierarchy contains ah the polynomial hierarchy PH and is con- 
tained in PS PACE. 

The arithmetic circuit classes defined in Section [2?T] are nonuniform. As a 
result, we will actually work with nonuniform versions of the counting classes 
defined above. We use the standard Karp-Lipton notation [13j: 

Definition 5 If K is a complexity class, the class K/ poly is the set of lan- 
guages A such that there exist a language B £ K , a polynomial p{n) and a 
family (a„)„>o of words (the "advice") satisfying 

• for all n >0, |a„| < p{n); 

• for all word x, x £ A <;=^ {x, a{\x\)) £ B. 

Note that the advice only depends on the size of x. 

The next lemma Lemmas 2.6 and 2.13] provides a first link between 
arithmetic complexity and the counting hierarchy. 

Lemma 2 // the permanent family is in VP° then CH/poly = P/poly. 

In particular, Lemma [2] was used to show that large sums and products are 
computable in the counting hierarchy |10l Theorem 3.10]. 

In the remainder of this section we summarize some relevant results 
from [18]. 

Definition 6 Let (fn) be a family of polynomials in such that the 

degree of fn and the bitsize of its coefficients are smaller than 2^^"^ for some 
polynomial p. 

The coefficient sequence of (fn) is the (double) sequence of integers 
a{n, a) defined by the relation 

2P(") — 1 

fn{x) = ^ a(n,a)x". 

The coefficient sequence is said to be definable in CH/poly if the language 
Bit(a) = {(1"", a, j, 6); the j-th bit ofa{n,a) is equal to b} is in CH/poly. 
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Note that in the above definition of Bit (a), the input n is given in unary but 
a and j are in binary (this is the same convention as in [18j; by contrast, 
in |10j ah inputs are in binary). 

Definition 7 Let (fn) be a family of polynomials as in Definition\^ We say 
that this family can he evaluated in CH/poly if the language 

< i < 2*'(")and the j-th bit o//„,(i) is equal to b} 

is in CH/poly. 

The fohowing result estabhshes a connection between these two defini- 
tions. It is stated (and proved) in the proof of the main theorem (Theo- 
rem 3.5) of [18J. 

Theorem 2 Let (/„) be a family of polynomials as in Definition\^ If {fn) 
can he evaluated in CH/poly at integer points, the coefficient sequence of {fn) 
is definable in CH/poly. 

In [T8] we actuahy prove a muhivariate version of this result, but the uni- 
variate case will be sufficient for our purposes. 

2.3 Sums of Products of Dense Polynomials 

Agrawal and Vinay have shown that polynomials of degree d = 0{m) in 
m variables which admit nontrivial arithmetic circuits also admit nontriv- 
ial arithmetic circuits of depth four [3]. Here, "nontrivial" means of size 
2o(d+a!log-j)^ The resulting depth 4 circuits are 11X^11 arithmetic formu- 
las: the output gate (at depth 4) and the gates at depth 2 are addition gates, 
and the other gates are multiplication gates. This theorem shows that for 
problems such as arithmetic circuit lower bounds or black-box derandomiza- 
tion of identity testing, the case of depth four circuits is in a certain sense 
the general case. 

We will need to apply reduction to depth four to multilinear polynomials 
only. In this case their result (Corollary 2.5 in |3j) reads as follows: 

Theorem 3 (Reduction to depth four) A multilinear polynomial in m 
variables which has an arithmetic circuit of size 2°*^™^ also has a depth 4 
arithmetic circuit of size 2°^'") . 

But what if we start from arithmetic circuits of size smaller than 2°^™') 
(for instance, of size polynomial in m) ? It is reasonable to expect that the 
size of the corresponding depth four circuits will be reduced accordingly, but 
such a result cannot be found in [3]. We can however prove the following 
result |15) . 
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Theorem 4 Let [fn) be a VP family of polynomials of degree dn = deg(/„). 
This family can he computed by a family (r„) of depth four circuits with 
j^O(logd,i) addnion gates and 7^,0 (v^ log dn) rnultiplication gates. The family 
{fn) can also he computed by a family (Fn) of depth four arithmetic formulas 
of size fi^iVd^'^ogdn) ^ rpj^^ inputs to r„ and Fn are variables of fn or rela- 
tive integers of polynomial bit size; their multiplication gates are of fan-in 

For instance, if the permanent is in VP° it can be computed by depth four 
arithmetic formulas of size j^C»(Vn log n)_ Compared to |3|, there are mainly 
two new elements in Theorem HI 

(i) The size bounds for the depth- four circuits (r„) and {Fn). 

(ii) The bit size bound for the inputs of these circuits. 

Our main results rely on these two new elements. In particular, we use (i) 
to show that constructing hitting sets of slightly superpolynomial size will 
still imply that the permanent is not in VP^. To the author's knowledge, 
an analysis of the size of constants created in the depth-reduction procedure 
of [3] has not been carried out yet. 

We can formulate Theorem d] in more traditional mathematical language. 



Corollary 1 Let {fn) be a VP family of polynomials of degree dn = deg(/„). 
Each fn can he represented by an expression of the form X]f=i OJli fij where 
k = 7^0(v^logrf,i) g^^^ ^ — 0{\/d^). The fij are polynomials of degree 
0{\/'dn) and their coefficients are relative integers of polynomial bit size. 
Moreover, the sum of the number of monomials in all the fij is ^^(v^logdn)^ 
and there are only rp^^°^'^^) distinct fij. 

Proof Sketch. Each multiplication gate at depth 1 in the depth four circuit of 
Theorem |4] computes a monomial. Each addition gate at depth 2 computes 
a fij. A multiplication gate at depth 3 computes an expression of the form 
rij fij- "^^^ output gate computes the final sum. 

In fact, several multiplication gates at depth 1 may contribute to the 
same monomial of a fij and the monomial will be obtained as the sum 
of the outputs of these multiplication gates H Taking this sum preserves 
the polynomial size bound on coefficients since there are only /^^{v^logdn) 
multiplication gates. □ 

^This is bound to happen since as a polynomial of degree 0{-\/dn) in n'''^' variables 
fij can have at most rfi'-y^) monomials, but there are many more multiplication gates. 
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A polynomial is sparse if it has few monomials compared to the maximal 
number of monomials possible given its degree and number of variables (recall 
that for a polynomial in n variables of degree d, this number is ("'^'^))- 
There is no reason for the fij to be sparse in general (but they have few 
terms compared to the maximum possible for As explained in the next 
section, if we replace the variables of the fij by a quickly growing sequence of 
powers of a single variable X, we obtain truly sparse univariate polynomials. 

3 Sums of Products of Sparse Polynomials 

A sums of products of sparse polynomials is an expression of the form 
Y2i Ylj fij where each fij G '^[X] is a sparse univariate polynomial. Here 
"sparse" means as usual that we only represent the nonzero monomials of 
each fij. As a result one can represent concisely polynomials of very high 
degree. We define the size of such an expression as the sum of the number 
of monomials in all the fij . Note that this measure of size does not take into 
account the size of the coefficients of the fij, or their degrees. These relevant 
parameters are taken into account in the following definition. 

Definition 8 We denote by SPSg^e the set of all polynomials in Z[X] which 
can be represented by an expression of the form Y^- Ylj fij so that: 

• The size of the expression as defined above is at most s. 

• Each coefficient of each fij can be written as the difference of two 
nonnegative integers with at most s nonzero digits in their binary rep- 
resentations. 

• These coefficients are of absolute value at most 2"^, and the fij are of 
degree at most e. 

Remark 1 The polynomials fij in this definition can be thought of as 
"sparse polynomial with sparse coefficients ". The integer s serves as a spar- 
sity parameter for the number of monomials as well as for the number of 
digits in their coefficients. A typical choice for these parameters is s = 2°^"'^ 
and e = 2^^'^\ where n represents an input size (see for instance Theorem\^ 
in Section\B\). 

We will show in Section [5] that constructing polynomial size hitting sets for 

sums of products of sparse polynomials implies the lower bound 

Here "polynomial size" means polynomial in s + log e. It is quite natural to 
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insist on a size bound which is polynomial in s and log e: s is an arithmetic 
circuit size bound, and loge can also be interpreted as an arithmetic cost 
since each power x"' in an fij can be computed from x in O(loge) operations 
by repeated squaring. Likewise, we can write each coefficient of each fij 
as the difference of two nonnegative integers as in Definition [HI and each 
of the < s powers of 2 occuring in a nonnegative integer can be computed 
from the constant 2 in 0(log e) operations. Each coefficient can therefore 
be computed in O(sloge) operations. As a result, a polynomial in SPSs^e 
can be evaluated from the constant 1 and the variable X in a number of 
arithmetic operations which is polynomial in s + log e. 

The size of a SPS polynomial as we have defined it is essentially the 
size of a depth three arithmetic circuit (or more precisely of a depth three 
arithmetic formula) computing the polynomial. In this depth three formula 
each input gate carries a monomial; each addition gate at level 1 computes 
a fij] each multiplication gate at level 2 computes a product of the form 
rij fij'i output gate at level 3 computes the final sum. 

We can further refine this representation of SPS polynomials by arith- 
metic formulas. Namely, instead of viewing the monomial aX^ as an atomic 
object which is fed to an input gate, we can decompose it as a sum of terms 
of the form ib2"X^; and each term can be further decomposed as a product 
of factors of the form ±2^' and X^^ . The resulting object is a depth four 
formula where each input gate carries an expression of the form ±2^* or x"^^ 
(note the symmetry between variables and constants in this representation). 
This connection between depth four formulas and SPS polynomials plays a 
crucial role in our results. In particular, we will use the following result in 
Section [H 

Proposition 1 Let (fn{x,z)) be a VP^ family of multilinear polynomials, 
withx andz two tuples of variables of length c-n each (for some constant c). 
Let fnix) be the univariate polynomial defined from fn by the substitution: 

/; (x) = /„(x2° ,x'\..., x'—' , 2^" , 22\ . . . , 2'—' ) . (3) 

The belong to SFSs,e where s = nC'(v^l°g") and e = 2'^("). 

More precisely, each f^ can be represented by an expression of the form 
'l2i=iYYj^i fij where k = n^(y^^°S"-) and m = 0{\/n). The f[- are poly- 
nomials of degree 2*^^"^ and have at most n^^^'^ nonzero monomials. Each 
coefficient of a monomial can be written as the difference of two non-negative 
integers of bit size 2^^^^ with at most n^^^'^ nonzero digits. Moreover, the 
sum of the number of monomials in all the f-j is n^iV^^^S"^) ^ and there are 
only n'^^^°^'^^ distinct f I- . 
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Proof Sketch. This is a fairly straightforward consequence of Corollary [TJ In 
particular, we have at most n^^^^ monomials in f-j because this is also an 
upper bound on the number of monomials in the corresponding polynomials 
fij of Corollary [TJ The effect of multiplication by the powers of two in ^ 
is to shift the coefficients of the fij without increasing their bit size, and we 
need to add (and subtract) rfi^^^ shifted coefficients to obtain a coefficient 
of a 4.. □ 

4 Algebraic number generators 

As explained in Section 11.21 we wish to construct hitting sets by taking the 
sets of all roots of the polynomials in an initial segment of an efficiently 
computable sequence of polynomials. The following definition makes the 
notion of "efficiently computable" precise (compare with the notion of hitting 
set generator m [1, Section 6.2]). 

Definition 9 An algebraic number generator is a sequence {fi)i>i of 
nonzero univariate polynomials fi{X) = Y^^a{a,i)X°^ such that for some 
integer constant c>l: 

1. The exponents a range from to i^; 

2. a{a,i) is a sequence of integers of absolute value < 2^" ; 

3. The language L{f) = {{a,i, j,b); the j-th bit of a{a,i) is equal to b} 
is in CH/poly. 

In the above definition we work with the complexity class CH/poly be- 
cause this is the largest complexity class for which our proofs go through. 
As shown in the next example, the language L{f) can often be located in a 
much smaller complexity class. 

Example 1 Each of the three sequences fi = x — i, (x* — 1) or — 2^x + i'^ + 1 
is an algebraic number generator. Notice that in these three examples we can 
compute the coefficients of the fi in polynomial time rather than in CH/poly, 
i.e., there is no need for counting and the construction of the fi is uniform. 

Theorem 5 Let (fi) be an algebraic number generator. From this sequence 
we define a family of univariate polynomials Qn by the formula: 

2" 

9n{x) = Wfi{x). 

i=l 
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The coefficient sequence b{n,a) of Qn, defined by gn{x) = ^^6(n,a)x°, is 
definable in CH/poly. 

Proof. The family (^f^) can be evaluated in CH/poly at integer points. This 
follows from the fact that integer sequences definable in CH/poly are stable 
under products and summations Theorem 3.10]. The result then follows 
from Theorem [2j □ 

We illustrate this result on two examples. 

Example 2 For fi = x — i we have gn{x) = 11^=1 ~ 0- This is the 
Pochhammer- Wilkinson polynomial of order 2". It was shown in [lO, proof 
of Main Theorem 1.2] that the coefficient sequence of Pochhammer- Wilkinson 
polynomials is definable in CH. 

Example 3 For fi = x^ — l we have gn{x) = 11?=! (-^^ ~ This product 
can be written as 

9n{x) =Y[hn{x,e) (4) 

where the auxiliary family hn is defined by: 

n 

hn{x,ei, . . . ,e„) = x JJ[(1 - ej) + ejX^' ] - 1. 

Note that the powers x^^ ^ in the above formula can be computed efficiently 
by repeated squaring. The family {hn) therefore belongs to the class VP^b of 
polynomials that can be evaluated in a polynomial number of arithmetic oper- 
ations in the constant-free unbounded- degree model. It then follows from 
that gn belongs to the class\/V\P^ (by definition, the families of this class are 
obtained as in ^ from a VP^b fo-fnUy by taking an exponential- size product 
over a VPj^^ family). It is shown in JTE'i Theorem 3.7] that the class VflP'' 
would collapse to VP^j, i/ VNP'^ collapses to \/P^ . The proof of this theorem 
is based on definability of coefficients in CH/poly for VfiP'^ families (in our 
particular example there is again no need for nonuniformity since the family 
{fi) is uniform). 

5 From a Hitting Set to a Lower Bound 

In this section we prove our main result: constructing hitting sets for the 
class SPSs^e of sums of products of sparse polynomials with sparse coefficients 
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implies a lower bound for the permanent (recall that the class SPS^^e is 
defined in Section [3]). 

We begin with a lemma showing that under the assumption PER G 
VP'^, polynomials with coefficients definable in CH/poly can be efficiently 
represented by sums of products of sparse polynomials. This result is an 
adaptation of [IS, Lemma 3.2], which was itself a scaled up version of |10l 
Th. 4.1(2)]. The main new ingredient is reduction to depth four as presented 
in Section [2.31 

Lemma 3 Let gn{x) = ^„a(n, a)x" where the integers a range from to 
2c-n _ a{n,a) is a sequence of integers of absolute value < 2^"" definable 
in CH/poly, and c is an integer constant (independent of n). 

If PER e VP° there is a polynomially bounded function p{n) such that 
2P(")5„ G SPS^,e where s = nO(v^l°g") and e = 2<^("). 

Proof. Expand a in binary: a{n,a) = ai(n, a)2*. Let /i„ be the follow- 

1=0 

ing multilinear polynomial: 

hn{xi,X2, ■ ■ ■ ,Xc.n,zi,. . . ,Zc.n) = ^ ^ aj(n,a)4' 

i=Q a=0 

In this formula, the exponents ij and aj denote the binary digits of the 
integers i and a. Then we have: 

hn{x^\x^\. . . , x2^ ""\ 2^°, 22\ . . . , 22^'""') = 5„(x). (5) 

Assume that the permanent family is in VP°. by Lemma [2] the nonuniform 
counting hierarchy collapses, therefore computing the i-th bit ai{n,a) of 
a{n, a) on input (l", a, i) is in GapP/poly (and even in P/poly). By Lemma[Tl 
(/in) £ VNP''. By Theorem [T] there exists a polynomially bounded function 
p(n) such that the family /„ = 2P(")/i„ is in VP''. Applying Proposition [1] 
to (fn) shows that the polynomials = 2'P^'^^gn are in SPSg^e for s = 
^O(v^logn) g ^ 2<^("). □ 

Next we we show that the product of the first 2" polynomials of an algebraic 
number generator can be represented by a sum of products of sparse polyno- 
mials of subexponential size, assuming again that the permanent is in VP". 



C-n 

C-n • 
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Theorem 6 Let (fi) be an algebraic number generator and gn{x) = 
Y{T=ifi(x)- ^/PER G VP° there is a polynomially bounded function p{n) 
such that IP^^'^gn G SPSs,e where s = n^CVSlogn) g ^ Here SPSs,e 

is the class of sums of products of sparse polynomials from Definition\^ 

Proof. We wish to apply Lemma [3] to the polynomial gn{x) = Y\4=i fi{X). 
Each polynomial fi in this product is of degree less than 2^^" (except possibly 
fni which may be of degree up to 2'^"'). Hence gn is of degree less than 2('^+^)"'. 
As to the coefficient size, we have Hf/nlli ^ 11 j ll/j||i where ||.||i denotes the 
sum of the absolute values of the coefficients of a polynomial. For each i we 
have ll/illi < (2'=" + 1) • 22™ < 2'^''^^'^" so that Ibnili < 22*^"'''". Finally, 
definability of coefficients in CH/poly is provided by Theorem [5j □ 

We can finally prove our main result. 

Theorem 7 (Lower Bound from Hitting Sets) Let {fi) be an algebraic 
number generator and H„i the set of all roots of the polynomials fi for all 
i < m. Let q and r be two functions such that -ffq(s)_|_r(e) is a hitting set 
for SPSs^e. The permanent is not in VP^ if r{e) = e"^^^ and q satisfies the 
following condition: for some constant c < 1 and s large enough, q{s) < 

2(logs)i+<=^ 

The conditions on q and r cover in particular the case of hitting sets of size 
polynomial in s and log e. This special case was treated in an earlier version 
of this papeiH. Note also that any set of more than s ■ e complex numbers is 
a hitting set since any polynomial in SPS^^e is of degree at most s ■ e. 

Proof of Theorem\7i Let gn{x) = Y[i=i /i(^) polynomial of Theorem[6l 

Assume by contradiction that: 

(i) There exists functions q and r such that i7q(s)_|_r(e) is a hitting set 
for SPSs^g) where q and r satisfy the conditions in the statement of the 
theorem. 

(ii) The permanent family is in VP*^. 

From our second assumption and Theorem[6]we know that l^^'^^g^ is in SPSg^e 
for s = j7,0{v^logn)^ g _ 20{n) g^j^^j some polynomially bounded function p{n). 
The conditions on q and r imply that for these values of s and e we have 
q{s) + r(e) = 2°^"'\ Hence by (i), for n large enough H2" is a hitting set for 
gn- This is a contradiction since gn vanishes on the hitting set but is 
not identically 0. □ 

"|http : //arxiv . org/abs/1004 . 4960v2 1 
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6 Hitting Sets from Real Analysis ? 



In this section we present our new versions of the r-conjecture. Each of the 
three conjectures imphes that the permanent is not in VP". 

Conjecture 1 (r-conjecture for SPS polynomials) There is a polyno- 
mial p such that any nonzero polynomial in SPSg^e has at most p{s + log e) 
integer roots. 

This conjecture imphes that PER^VP" (apply Theorem [7] to the algebraic 
number generator fi{x) = x — i). Conjecture [1] follows from the r-conjecture 
of Shub and Smale on integer roots of polynomials [26^127] since, as explained 
after Definition [HI polynomials in SPS^^e can be evaluated by constant-free 
arithmetic circuits of size polynomial in s and loge. It was already shown 
in |10| that the r-conjecture implies a lower bound for the permanent. The 
point of Conjecture [T] is that to obtain such a lower bound we no longer have 
to bound the number of integer roots of arbitrary arithmetic circuits: we 
need only do this for sums of products of sparse polynomials. This looks like 
a much more manageable class of circuits, but the question is of course still 
wide open. Another related benefit of SPS polynomials in this context is that 
techniques from real analysis might become applicable. Before explaining 
this in more detail we formulate a somewhat stronger conjecture. The idea 
is that the parameter e in Conjectured] as well as the sparsity hypothesis on 
the integer coefficients might be irrelevant. This leads to: 

Conjecture 2 (r-conjecture for SPS polynomials, strong form) 

Consider a nonzero polynomial of the form 



where each fij G 7j[X] has at most t monomials. The number of integer roots 
of f is bounded by a polynomial function of kmt. 

Note that the size of / as defined in Section [3] is bounded by kmt. Therefore, 
Conjecture [2] is indeed stronger than Conjecture [TJ Finally, we formulate an 
even stronger conjecture. 

Conjecture 3 (real r-conjecture) Consider a nonzero polynomial of the 



k m 



f{X) = Y.J[f.,{X) 



form 



k 



m 




(6) 



17 



where each fij G M[X] has at most t monomials. The number of real roots 
of f is bounded by a polynomial function of kmt. 

One could also formulate a weak version of the real r-conjecture where the 
parameters s and e would play the same role as in Conjecture [TJ Also, 
instead of a bound on the number of real roots which is polynomial in kmt 
one could seek a bound q{kmt) which is slightly superpolynomial in the 
sense of Theorem [TJ for some constant c < 1 and s large enough, we have 
q{s) < 2('°s*)^^''. By Theorem [71 such a bound would still be strong enough 
to conclude that the permanent is not in VP'' (consider again the algebraic 
number generator fi{x) = x — i, and the function r(e) = 1). This goal might 
still be difficult to achieve, so it would be of great interest to establish upper 
bounds on the number of real roots that are even weaker but still strong 
enough to imply interesting lower bounds. For instance: 

Proposition 2 Assume that for nonzero polynomials of the form ^ the 
number of real roots is less than q{kmt), where the function q satisfies the 
condition q{s) = 2*° ^ . Then the permanent is not computable by polynomial 
size depth 4 circuits using polynomial size integer constants. 

Proof. Assume that the permanent is computable by polynomial size depth 
4 circuits using polynomial size integer constants. In particular, the perma- 
nent is in VP*^. By completeness of the permanent we have the following 
strengthening of Theorem [T] for every family in VNP*^ there exists a 
polynomially bounded function p(n) such that the family (2P("')/i„) is com- 
putable by polynomial size depth 4 circuits (using polynomial size integer 
constants). 

We consider again the algebraic number generator fi{x) = x — i and 
the poynomial gn{x) = 11?=! /«(^) Theorem [6j We claim that gn can be 
expressed as a SPS polynomial of size polynomial in n. This yields a con- 
tradiction since the assumption in the statement of the Proposition implies 
that Qn has 2"°*^' real roots but in reality gn has 2" integer roots. 

The proof of the claim is similar to the proof of Lemma [3] and Theorem [6l 
In particular, we have for gn the same representation as in equation ([5]) of 
Lemma [3l But now, the above-mentioned strengthening of Theorem [T] shows 
that hn is computable by a depth 4 circuit of polynomial size. We obtain 
the SPS polynomial for gn by plugging powers of x into this circuit. □ 

At present there isn't a lot of evidence for or against Conjecture [3l We 
do know that the conjecture holds true when k = 1: by Descartes' rule 
each polynomial fij has at most 2t — 2 nonzero real roots, so / has at most 
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2m{t — 1) + 1 real roots. Also some indirect evidence is provided by the few 
known examples of polynomials with short arithmetic circuits but many real 
roots m 127] : these examples are definitely not given as sums of products of 
sparse polynomials. The case k = 2 already looks nontrivial. In the general 
case we can expand / as a sum of at most kf^ monomials, so we have at most 
2A:t™ — 1 real roots. A refutation of the conjecture would be interesting from 
the point of view of real algebra and geometry as it would yield examples 
of "sparse like" polynomials with many real roots. Of course, a proof of the 
conjecture would be even more interesting as it would yield a lower bound 
for the permanent. 

7 Final Remarks 

We have shown that constructing hitting sets for sums of products of sparse 
polynomials with sparse coefficients will show that PER^VP*^. It should 
be possible to obtain a variation of this result where the conclusion is that 
r(PER„), the constant-free arithmetic circuit complexity of the permanent, 
is not polynomial in n. To obtain this stronger conclusion, a stronger hy- 
pothesis should be necessary. It seems natural to expect that the role payed 
by sparse polynomials with sparse coefficients will now played by sparse 
polynomials with coefficients of "small" r-complexity (this is a larger class of 
polynomials since sparse coefficients are certainly of small r-complexity). 

Most importantly, one should try to prove or disprove the real r- 
conjecture. A solution in the case /c = 2 (a sum of two products of sparse 
polynomials) would already be quite interesting. We note that the search 
for good upper bounds on the number of solutions of sparse multivariate 
systems is a topic of current interest in real algebraic geometry. The theory 
of fewnomials [14j provides finiteness results and sometimes quantitative es- 
timates on the number of real roots in very general "sparse like" situations. 
The general estimates from |14) . at least when applied in a straightforward 
manner, do not seem strong enough to imply the real r-conjecture. Never- 
theless, one can hope that the methods developed in |14| as well as in more 
recent work such as O El |2T] will turn out to be useful. 
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